Cybersecurity GRC Team Lead

Lead and manage a team of cybersecurity GRC analysts responsible for: Supporting the Controlled Research Program and ensuring alignment with CUI-related frameworks (e.g., NIST 800-171, CMMC, DFARS, ITAR) Conducting risk assessments, gap analyses, control reviews, and compliance documentation for enterprise-wide regulatory frameworks, such as HIPAA, PCI-DSS, NIST 800-53, GLBA, and others. Advising on appropriate security controls, documenting implementation strategies, and helping units align with both external requirements and internal policy. Oversee development and maintenance of security compliance documentation including System Security Plans (SSPs), POAandMs, risk registers, and internal/external audit response materials. Work with stakeholders across the institutionincluding IT leadership, research administration, legal, and compliance officesto interpret regulatory requirements and provide practical guidance. Serve as a liaison between the ISO and external auditors, assessors, and institutional compliance teams. Maintain awareness of emerging regulatory requirements (e.g., new CMMC versions, updated HIPAA guidance, changes in PCI-DSS) and proactively update practices and communications. Guide and mentor team members, supporting both professional development and technical growth. Participate in strategic planning and contribute to the long-term vision of a cohesive, risk-informed GRC program that supports research and administrative operations. Ensure continuous improvement of GRC processes, templates, and tools; support GRC platform management (e.g., IsoraGRC).Perform other duties as assigned to support the Information Security Offices mission.